Privacy Policy

Introduction

At tapouts, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect information in relation to the tapouts Thrive Assessment ("Assessment"), our website, mobile applications, and related services (collectively, the "Services"). We believe in transparency and are committed to protecting your privacy and the privacy of your child.

The tapouts Thrive Assessment is designed for parents of children ages 4-16 and involves the collection of information about your child's emotional and social development. This policy is designed to help you understand how we handle this sensitive information and to inform you of your rights regarding this information.

IMPORTANT INFORMATION FOR PARENTS

The tapouts Thrive Assessment is designed for parents to complete on behalf of their children. We only collect information about children with parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA). By creating an account and using the Assessment, you represent that you are the parent or legal guardian of the child for whom you are completing the Assessment, or that you have the permission of the parent or legal guardian to do so.

If you believe that we have collected information from a child under 13 without proper parental consent, please contact us immediately at start@tapouts.com

1. Information We Collect

We collect the following categories of information:

1.1 Account Information

  • Your name, email address, password, and contact information
  • Payment information (processed securely through our payment processor)
  • Demographic information such as your location

1.2 Child Information

  • Child's first name (we do not collect last names)
  • Child's age
  • Child's gender (optional)
  • Information about your child's emotional and social development as provided through your responses to the Assessment questions

1.3 Assessment Responses

  • Your responses to the Assessment questions regarding your child's behaviors, emotions, and social interactions
  • Domain-specific information related to emotion regulation, resilience, emotional stability, confidence, and social connection

1.4 Usage Information

  • Information about how you access and use our Services
  • Device information (such as your IP address, browser type, operating system)
  • Log data (such as the pages you view and when you viewed them)
  • Cookies and similar tracking technologies (as described in Section 5)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving the Services

  • To provide you with access to the Assessment and generate your child's Thrive Report
  • To calculate domain scores and create personalized recommendations
  • To improve and enhance the Assessment and our Services
  • To respond to your inquiries and provide customer support

2.2 Research and Analysis

  • To validate and improve the Assessment's effectiveness
  • To develop normative data and improve scoring algorithms
  • To conduct research to better understand child development (using only anonymized and aggregated data)

2.3 Communications

  • To send you important information about your Assessment and Thrive Report
  • To provide you with updates, resources, and recommendations related to your child's development
  • To send you information about our Services, updates to our policies, and other administrative messages

2.4 Legal and Security Purposes

  • To protect the security and integrity of our Services
  • To detect and prevent fraudulent activity
  • To comply with legal obligations and enforce our Terms of Service

3. Information Sharing and Disclosure

We are committed to protecting your privacy and that of your child. We do not sell, rent, or lease your personal information or your child's information to third parties for their marketing purposes.

We may share information in the following circumstances:

3.1 With Your Consent

  • When you explicitly request that we share information
  • If you choose to share your child's Thrive Report with others (such as teachers, healthcare providers, or other caregivers)

3.2 Service Providers

  • With third-party service providers who help us operate our business and deliver our Services, such as:
    • Cloud hosting and data storage providers
    • Payment processors
    • Data Analytics providers
    • Customer support services

These service providers are contractually obligated to use the information only to provide services to us and in accordance with this Privacy Policy.

3.3 Legal Requirements

  • In response to lawful requests by public authorities, including to meet national security or law enforcement requirements
  • To protect our rights, privacy, safety, or property, or that of you or others
  • In connection with a sale, merger, or acquisition of all or a portion of our company

3.4 Aggregated or De-identified Information

  • We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you or your child for research, educational, or business purposes

4. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, use, and modification. While tapouts is not a HIPAA-covered entity, we voluntarily implement security measures inspired by HIPAA standards to protect your information. These include:

  • Encryption of data in transit and at rest
  • Access controls for our systems and databases
  • Regular security assessments
  • Employee training on data protection

We implement these enhanced security protocols to provide you with an additional level of confidence in our data handling practices. However, no security system is impenetrable, and we cannot guarantee the absolute security of our systems.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about how you use our Services. Cookies are small data files that are placed on your device when you visit our website. They allow us to remember your preferences, analyze how our Services are being used, and enable certain features.

5.1 Types of Cookies We Use

  • Essential cookies: Required for the operation of our Services
  • Analytical/performance cookies: Help us understand how visitors interact with our website
  • Functionality cookies: Remember your preferences and settings
  • Targeting cookies: Record your visit, pages visited, and links followed

5.2 Your Choices Regarding Cookies

Most web browsers allow you to control cookies through their settings. However, if you disable cookies, some features of our Services may not function properly.

6. Children's Privacy

The tapouts Thrive Assessment is designed for parents of children ages 4-16. We comply with the Children's Online Privacy Protection Act (COPPA), which requires parental consent for the collection of personal information from children under 13.

6.1 Information We Collect About Children

We collect limited information about children, including:

  • First name (no last names)
  • Age
  • Gender (optional)
  • Information about emotional and social development as provided by parents

6.2 Parental Consent

By creating an account and using the Assessment, you represent that you are the parent or legal guardian of the child for whom you are completing the Assessment, or that you have the permission of the parent or legal guardian to do so.

6.3 Parental Rights

As a parent or legal guardian, you have the right to:

  • Review the information collected about your child
  • Request that we delete information collected about your child
  • Refuse further collection or use of your child's information

To exercise these rights, please contact us at privacy@tapouts.com.

7. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

7.1 Access and Portability

  • The right to request access to the personal information we have about you and your child
  • The right to receive your data in a structured, commonly used format

7.2 Correction and Deletion

  • The right to request that we correct inaccurate or incomplete information
  • The right to request deletion of your personal information and your child's information

7.3 Restriction and Objection

  • The right to request that we restrict the processing of your information
  • The right to object to certain processing of your information

7.4 Consent Withdrawal

  • The right to withdraw your consent at any time, where we rely on consent as the lawful basis for processing

To exercise these rights, please contact us at privacy@tapouts.com. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

8. State-Specific Privacy Rights

8.1 California Residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • The right to know what personal information we collect, use, and disclose
  • The right to delete personal information we have collected
  • The right to correct inaccurate personal information
  • The right to opt-out of the sale or sharing of personal information (although we do not sell or share personal information)
  • The right to limit the use and disclosure of sensitive personal information
  • The right to non-discrimination for exercising your privacy rights

California residents can exercise these rights by contacting us at start@tapouts.com

8.2 Other U.S. States

Residents of certain other U.S. states (including Colorado, Connecticut, Virginia, and others) may have similar rights under their state's privacy laws. Please contact us to exercise these rights.

9. Data Protection Rights Under the GDPR

If you are a resident of the European Economic Area ("EEA"), you have certain data protection rights and we aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

  • You have the right to withdraw consent where you have previously given your consent to the processing of your Personal Information. To the extent that the legal basis for our processing of your Personal Information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
  • You have the right to learn if your Personal Information is being processed by us, obtain disclosure regarding certain aspects of the processing, and obtain a copy of your Personal Information undergoing processing.
  • You have the right to verify the accuracy of your information and ask for it to be updated or corrected. You also have the right to request us to complete the Personal Information you believe is incomplete.
  • You have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent. Where Personal Information is processed for the public interest, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection. You must know that, however, should your Personal Information be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn whether we are processing Personal Information for direct marketing purposes, you may refer to the relevant sections of this Policy.
  • You have the right, under certain circumstances, to restrict the processing of your Personal Information. These circumstances include: the accuracy of your Personal Information is contested by you and we must verify its accuracy; the processing is unlawful, but you oppose the erasure of your Personal Information and request the restriction of its use instead; we no longer need your Personal Information for the purposes of processing, but you require it to establish, exercise or defend your legal claims; you have objected to processing pending the verification of whether our legitimate grounds override your legitimate grounds. Where processing has been restricted, such Personal Information will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, to exercise or defense of legal claims, for the protection of the rights of another natural, or legal person or for reasons of important public interest.
  • You have the right, under certain circumstances, to obtain the erasure of your Personal Information from us. These circumstances include: the Personal Information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure such as where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, to exercise or defense of legal claims.
  • You have the right to receive your Personal Information that you have provided to us in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance from us, provided that such transmission does not adversely affect the rights and freedoms of others.
  • You have the right to complain to a data protection authority about our collection and use of your Personal Information. If you are not satisfied with the outcome of your complaint directly with us, you have the right to lodge a complaint with your local data protection authority. For more information, please contact your local data protection authority in the EEA.

10. Email Marketing

We offer electronic newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your e-mail address confidential and will not disclose your email address to any third parties except as allowed in the information use and processing section or for the purposes of utilizing a third-party provider to send such emails. We will maintain the information sent via e-mail in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all e-mails sent from us will clearly state who the e-mail is from and provide clear information on how to contact the sender. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails.

11. Data Retention

We retain your personal information and your child's information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. After you close your account, we may retain certain information for a limited period to comply with legal requirements and for legitimate business purposes.

12. International Data Transfers

tapouts is based in the United States, and the information we collect is governed by U.S. law. If you access our Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

13. Advertisements

We may permit certain third-party companies to help us tailor advertising that we think may be of interest to Users and to collect and use other data about User activities on the Website. These companies may deliver ads that might place cookies and otherwise track User behavior.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, through our Services, or as otherwise required by applicable law. Your continued use of the Services after such notice constitutes your acceptance of the revised Privacy Policy.

15. Information Security

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in our control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and the Website and Services cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

As the security of Personal Information depends in part on the security of the device you use to communicate with us and the security you use to protect your credentials, please take appropriate measures to protect this information.

16. Additional Information for Parents About the Thrive Assessment

The tapouts Thrive Assessment is an educational tool designed to help parents understand their child's emotional and social development. It is not a clinical diagnostic instrument. The Assessment measures five key domains:

  • Emotion Regulation
  • Resilience
  • Emotional Stability
  • Confidence
  • Social Connection

We use standardized measurement tools, including PROMIS® (Patient-Reported Outcomes Measurement Information System) scales and proprietary tapouts measures to provide educational information about your child's development across these domains.

The information provided through the Assessment is intended to help you better understand your child's strengths and areas where they may benefit from additional support. It should be considered as one source of information about your child's development and is not a substitute for professional advice.

If you have concerns about your child's development, we encourage you to consult with appropriate healthcare professionals.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: tapouts, Inc.start@tapouts.com